Suspicious DNS Queries to Non-Standard Ports

Jason Nelson@Jason

•updated Jul 21, 2025•14•2•157

Identifies DNS queries to non-standard ports, often used for DNS tunneling or C2. **Validation**: High - DNS to non-53 ports is rarely legitimate.